PW.1.1_pw11
Use forms of risk modeling – such as threat modeling, attack modeling, or attack surface mapping – to help assess the security risk for the software.
1.21k repo starsObserved in 1 repos
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
PW.1.3_pw13
Where appropriate, build in support for using standardized security features and services (e.g., enabling software to integrate with existing log m...
1.21k repo starsObserved in 1 repos
DevOps & Security
PW.4.1_pw41
Acquire and maintain well-secured software components (e.g., software libraries, modules, middleware, frameworks) from commercial, open-source, and ot
1.21k repo starsObserved in 1 repos
DevOps & Security
PW.4.4_pw44
Verify that acquired commercial, open-source, and all other third-party software components comply with the requirements, as defined by the organizati
1.21k repo starsObserved in 1 repos
DevOps & Security
PW.8.1_pw81
Determine whether executable code testing should be performed to find vulnerabilities not identified by previous reviews, analysis, or testing and, if
1.21k repo starsObserved in 1 repos
DevOps & Security
PW.9.1_pw91
Define a secure baseline by determining how to configure each setting that has an effect on security or a security-related setting so that the default
1.21k repo starsObserved in 1 repos
DevOps & Security
PW.9.2_pw92
Implement the default settings (or groups of default settings, if applicable), and document each setting for software administrators.
1.21k repo starsObserved in 1 repos
DevOps & Security
RA-10_threat-hunting
Establish and maintain a cyber threat hunting capability to: Search for indicators of compromise in organizational systems; and Detect, track, and dis
1.21k repo starsObserved in 1 repos
DevOps & Security
RA-2(1)_impact-level-prioritization
Conduct an impact-level prioritization of organizational systems to obtain additional granularity on system impact levels.
1.21k repo starsObserved in 1 repos
DevOps & Security
RA-2_security-categorization
Categorize the system and information it processes, stores, and transmits;
1.21k repo starsObserved in 1 repos
DevOps & Security